new(ci): push docker images to ghcr. by FedeDP · Pull Request #70 · falcosecurity/kernel-testing

FedeDP · 2023-08-01T07:39:04Z

WIP until we've got a nwe self-hosted runner associated with the kernel-testing repository (right now, the self-hosted is only available for libs repo).

poiana · 2023-10-30T09:45:59Z

Issues go stale after 90d of inactivity.

Mark the issue as fresh with /remove-lifecycle stale.

Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Provide feedback via https://github.com/falcosecurity/community.

/lifecycle stale

FedeDP · 2023-11-02T08:44:05Z

/remove-lifecycle stale

FedeDP · 2023-12-06T09:59:04Z

We now have actuated.dev arm nodes! 🚀

FedeDP · 2023-12-06T10:30:30Z

Build is failing because :

2023-12-06T10:23:58.0504130Z ERROR: failed to solve: failed to register layer: write /usr/lib64/libstdc++.so.6.0.29: no space left on device

I think we need more disk space from actuated.dev nodes.

FedeDP · 2023-12-06T11:41:59Z

images/Makefile

+				echo "Pushing image: $$image"; \
+				docker push $$image; \
+			fi; \
+			docker image rm -f $(docker images -a | grep -v "initrd-builder:0.0.1" | awk 'NR>1 {print $3}'); \


Clear up all images except for initrd-builder:0.0.1 that is not pushed anywhere and is only used locally as a base for other images.

FedeDP · 2023-12-06T13:12:56Z

/hold

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

…modernbpf-builder now. Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

FedeDP · 2023-12-11T09:57:07Z

images/Makefile

+				echo "Pushing image: $$image"; \
+				docker push $$image; \
+			fi; \
+			docker image rm -f $$image; \


Since images are big, we don't want to fill up the runner node disk space; therefore after each build and eventual push, clean up images.

FedeDP · 2023-12-11T09:57:50Z

images/x86_64/amazonlinux2022/5.15/Dockerfile

 		xargs -I@ curl -Lo headers.rpm ${URL}@ && \
    grep -E 'kernel-devel-'${VERSION}'.*.rpm' primary.xml | grep href | cut -d\"  -f2 | \
 		xargs -I@ curl -Lo sources.rpm ${URL}@ && \
-    grep -E 'bpftool-'${VERSION}'.*.rpm' primary.xml | grep href | cut -d\"  -f2 | \


bpftool is not needed since scap-open with modern-bpf built in gets built in a specific step with a specific rootfs.

FedeDP · 2023-12-11T10:11:02Z

There are multiple issues still since lots of distros killed headers packages that we were using (ie: they are not present anymore in their repos).

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

Moreover, added archlinux 6.7. Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

FedeDP · 2024-01-31T10:48:42Z

Still failing:
arm64:

FAIL: ghcr.io/falcosecurity/kernel-testing/fedora-kernel:6.2-aarch64-7724324758
FAIL: ghcr.io/falcosecurity/kernel-testing/oraclelinux-kernel:5.15-aarch64-7724324758

amd64:

FAIL: ghcr.io/falcosecurity/kernel-testing/oraclelinux-kernel:2.6-x86_64-7724324758

…ht override kernel Makefile variable. Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

Also, moved ubuntu-6.3 to 6.5 and added archlinux x86_64 6.7 entry. Finally, renamed `version` in `tag`. Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

…pported. Since virtio_mmio is not supported on this kernel. Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

FedeDP · 2024-01-31T15:43:31Z

Arm64 should be all ok; we are having issues with the actuated arm64 node and docker:

2024-01-31T15:39:33.0685388Z #3 ERROR: failed to copy: httpReadSeeker: failed open: failed to do request: Get "http://192.168.128.1:5000/v2/library/fedora/manifests/sha256:3f01c8f79691df76331cb4bb0944794a60850475e859c15e49513fcbe0a3d88a?ns=docker.io": dial tcp 192.168.128.1:5000: connect: connection refused

ansible-playbooks/group_vars/all/vars.yml

images/Makefile

… variables. Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

FedeDP · 2024-02-06T14:00:18Z

/unhold
We are finally ready!

therealbobo · 2024-02-06T14:01:06Z

/approve

poiana · 2024-02-06T14:04:43Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: FedeDP, therealbobo

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

~~OWNERS~~ [FedeDP,therealbobo]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

poiana added do-not-merge/work-in-progress dco-signoff: yes labels Aug 1, 2023

poiana requested review from Andreagit97 and alacuku August 1, 2023 07:39

poiana added approved size/M labels Aug 1, 2023

poiana added the lifecycle/stale label Oct 30, 2023

poiana removed the lifecycle/stale label Nov 2, 2023

FedeDP force-pushed the new/push_images_ghcr branch from 6edee38 to 3833586 Compare December 6, 2023 09:58

FedeDP changed the title ~~wip: new(ci): push docker images to ghcr.~~ new(ci): push docker images to ghcr. Dec 6, 2023

poiana removed the do-not-merge/work-in-progress label Dec 6, 2023

FedeDP force-pushed the new/push_images_ghcr branch from c017c98 to 132f5d7 Compare December 6, 2023 11:31

poiana added size/L and removed size/M labels Dec 6, 2023

FedeDP force-pushed the new/push_images_ghcr branch from 132f5d7 to 93e2c52 Compare December 6, 2023 11:41

FedeDP commented Dec 6, 2023

View reviewed changes

FedeDP force-pushed the new/push_images_ghcr branch from 93e2c52 to 56cff14 Compare December 6, 2023 13:11

poiana added the do-not-merge/hold label Dec 6, 2023

FedeDP added 2 commits December 6, 2023 16:39

new(ci): push docker images to ghcr.

dfad3b1

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

fix(images): drop bpftool dep from images since it is only used by …

16fe946

…modernbpf-builder now. Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

FedeDP force-pushed the new/push_images_ghcr branch from acf756f to 16fe946 Compare December 6, 2023 15:40

FedeDP commented Dec 11, 2023

View reviewed changes

therealbobo previously approved these changes Dec 11, 2023

View reviewed changes

FedeDP force-pushed the new/push_images_ghcr branch from cacf3f8 to f51cdc4 Compare January 30, 2024 16:18

FedeDP added 2 commits January 30, 2024 17:38

chore(ansible-playbooks): skip line-length check for machines matrix.

c7e4b8b

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

chore(images): multiple improvements to images Dockerfiles.

c7f093e

Moreover, added archlinux 6.7. Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

poiana added size/XXL and removed size/XL labels Jan 31, 2024

FedeDP added 2 commits January 31, 2024 10:13

chore(images): more fixes.

51ad010

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

chore(images): more fixes.

e8bddbd

Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

FedeDP added 2 commits January 31, 2024 13:02

chore(images): use ARCHITECTURE in place of ARCH since ARCH mig…

ec3b44f

…ht override kernel Makefile variable. Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

chore(vars): bumped matrix using falcosecurity images.

777a6d1

Also, moved ubuntu-6.3 to 6.5 and added archlinux x86_64 6.7 entry. Finally, renamed `version` in `tag`. Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

FedeDP force-pushed the new/push_images_ghcr branch from 214ae89 to 777a6d1 Compare January 31, 2024 12:22

cleanup(images): remove oraclelinux 2.6 that was never meant to be su…

dd97aa4

…pported. Since virtio_mmio is not supported on this kernel. Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

FedeDP commented Feb 6, 2024

View reviewed changes

ansible-playbooks/group_vars/all/vars.yml Show resolved Hide resolved

FedeDP commented Feb 6, 2024

View reviewed changes

images/Makefile Show resolved Hide resolved

FedeDP commented Feb 6, 2024

View reviewed changes

images/Makefile Outdated Show resolved Hide resolved

FedeDP commented Feb 6, 2024

View reviewed changes

images/Makefile Outdated Show resolved Hide resolved

FedeDP force-pushed the new/push_images_ghcr branch 3 times, most recently from c666823 to 612325b Compare February 6, 2024 12:18

chore: small improvements plus added docs for new images Makefile env…

56a25dd

… variables. Signed-off-by: Federico Di Pierro <nierro92@gmail.com>

FedeDP force-pushed the new/push_images_ghcr branch from 612325b to 56a25dd Compare February 6, 2024 12:47

poiana removed the do-not-merge/hold label Feb 6, 2024

therealbobo approved these changes Feb 6, 2024

View reviewed changes

poiana merged commit f10873b into main Feb 6, 2024

poiana deleted the new/push_images_ghcr branch February 6, 2024 14:04

FedeDP mentioned this pull request Feb 7, 2024

Kernel Version Testing Framework improvements falcosecurity/libs#1224

Closed

14 tasks

Conversation

FedeDP commented Aug 1, 2023

Uh oh!

poiana commented Oct 30, 2023

Uh oh!

FedeDP commented Nov 2, 2023

Uh oh!

FedeDP commented Dec 6, 2023 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

FedeDP commented Dec 6, 2023

Uh oh!

FedeDP Dec 6, 2023

Choose a reason for hiding this comment

Uh oh!

FedeDP commented Dec 6, 2023

Uh oh!

FedeDP Dec 11, 2023

Choose a reason for hiding this comment

Uh oh!

FedeDP Dec 11, 2023

Choose a reason for hiding this comment

Uh oh!

FedeDP commented Dec 11, 2023

Uh oh!

FedeDP commented Jan 31, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

FedeDP commented Jan 31, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

FedeDP commented Feb 6, 2024

Uh oh!

therealbobo commented Feb 6, 2024

Uh oh!

poiana commented Feb 6, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

FedeDP commented Dec 6, 2023 •

edited

Loading

FedeDP commented Jan 31, 2024 •

edited

Loading

FedeDP commented Jan 31, 2024 •

edited

Loading